SCEP

SCEP profile automatically configure request the user certificate to authenticate the client without specifying domain credentials.

2.1 Access address

• Enter the name of the URL for the SCEP server (eg. Network Device Enrollment Service)
• Only 80 (HTTP) port is supported by default
• Exemplary URL: http:///certsrv/mscep/mscep.dll
• Maximum length of the text is 255
• Required

2.2 CA ID

• Enter the name of the profile for SCEP servers (eg. Network Device Enrollment Service) that support named-profiles.
• Maximum length of the text is 255

2.3 Subject

• Global variables available
• Required

2.4 Encryption Algorithm

• Type of encryption algorithm. Defines how strong security will be.
• One of:
  • DES
  • DES3
  • AES128
  • AES192
  • AES256
• Required

2.5 Encryption signature

• Type of encryption signature. Defines how strong security will be.
• One of:
  • SHA1
  • SHA256
  • SHA384
  • SHA512
• Required

2.6 Key length

• Length of the key. Defines how strong security will be
• One of:
  • 1024
  • 2048
  • 3072
  • 4096
• Required

2.7 Fingerprint

• Enter the fingerprint of the CA issuing the root certificate on SCEP server (eg. Network Device Enrollment Service)
• Maximum length of the text is 500
• Required

2.8 Password

• Enter the enrollment challenge password generated during a SCEP server deployment
• The value should be a 32-digit string of alphanumeric characters
• Maximum length of the text is 255
• Required

2.9 Key encipherment

• If checked, use as key encipherment
• Use when the sender and receiver of the public key need to derive the key without using encryption

2.10 Digital signature

• If checked, use as digital signature
• Specific type of signature that is backed by a digital certificate. It’s providing proof of your identity

3.1 Type

• One of:
  • Distinguished_Name
  • NT_principal_Name
  • RFC822_Name
  • DNS_Name
• Required

3.2 Value

• Global variables available
• Required

3.3 Remove

• Removes added alternative name

3.4 Clear

• Removes all alternative names added to list

3.5 Add

• Adds alternative name to list